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dn: cn=managerrole, 1 dc=dom, dc=ain 
objectclass: top , 
objectclass: LDAPsubentry 
objectclass: nsRple 
objectclass: nsSitpleRple 
objectclass: nsK^ageiRole 
cn: managerrole. 

description: Manager Role within the Company 
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dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 

objectclass: person 

objectclass: inetorgperson 

uid: poinliair 

gn: pointy 

sn: hair 

nsRoleDN: cn=managerrole, dc=dora, dc 
description: Pointy Haired Manager 
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dn: cn=buildingl2people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: building 12people 

nsRoleFilter: building=12 

description: People who work in building 12 
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dn: cn=megamanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRoSI 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
cn: megamanagerrole 

i 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 
nsRoleDN: cn=networkmanager, dc=dom, dc=ain 
description: Super Manager Role within the Company 
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dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDflPsubentry 
objectclass: nsRole A 
objectclass: nsCompleilble 
objectclass: nsEnumeratedRole 
objectclass: groupofuniquenames 
en: peonrole 

groupmember: uid=dbofeham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 
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; i i 

FOR EACH ENTRY WITHIN SCOPE, 
THE COMPUTED ATTRIBUTE nsROLE 
' IS CALCULATED. 

THE COATED ATTRIBUTE nsROLE 
IS EXAMS Til SEE IF THE ROLE 
IS PRESENT. 

■ 4 

THIS RESULTS IN A LIST OF 
ENTRIES THAT POSSESS THE ROLE. 
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i. f 

THE LIST IS THEREAFTER 
RETURNED TO A CLIENT. 
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GIVEN COS SCHEME 
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rdn of entry 
{null} 

{ country = us} 



f ORGANIZATION = 
1 MEGA CORP 



organizational! 
units = sales; i 
location = palo 

ALTO 



distinguished 
name of entry 

{null} 



{COUNTRY = US} 

{country = us} 

/ORGANIZATION ="1 
t_ MEGA CORP J 

{country = us} 
r organization = 

[_ MEGA CORP 
ORGANIZATIONAL - 
UNIT = SALES; 
LOCATION = 
PALO ALTO 
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DN: cn= messaging_server_cos, ou= people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosClassicDefinition " 
cosTemplate 

DN: cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceClass 
cosAttribute: mailboxquota 
cosfittribute: maysendexternalmail 
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dn: cn= user, cn=MailServ r erCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate ' 

mailboxquota: 10000000 

maysendexternalmail: TRUE 

dn: cn=guest, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass:top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 



FIGURE 19 



FEB 0 2 WW -\ 



20/24 




FIGURE 20 
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dn: cn= messagingJ^rver_cos, ou= people, o=acrae 

objectclass: top 

objectclass: LDAPSubentry 

objectclass: cosSuperDefinition 

objectclass: cosPointerDefmition 

cosTemplateDn: ou=people, o=acme 

cosAttribute: facsimilieTelephoneNumber default 
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dn: cn= messaging_fsrver_cos, ou= people, 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosIndirectDefinition 
cosIndirectSpecifier: manager 
cosAttribute: accountingCode 
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